3 ms·
Let's hope no one sets up The International Obfuscated Objective-C Code Contest; or that the code reviewers at Apple are competent and experience enough to work
by cantankerous 14y ago
Let's hope no one sets up The International Obfuscated Objective-C Code Contest; or that the code reviewers at Apple are competent and experience enough to work with advanced software security threats.
Apple isn't doing thorough code reviews of every app they get. They're just checking sanity and adherence to "the rules". Even if the code was obfuscated and they wanted to review your code, they could write you an email that says "your code is unreadable, make it better or you're not going to get on the app store".
Sandboxes can and are exploited.
So are you saying that because Chrome was exploited, that the sandbox model in iOS some how makes the system less secure? The notion doesn't follow. Yes, sandboxes can be exploited, but it's NOT EASY TO DO THIS. The idea behind good, secure design is not to try to secure from every attack vector possible, but to eliminate low hanging fruit entirely, and make elaborate breaches very, very expensive to find and create. Apple is doing all of this here with the sandbox design, and it works quite well for them.
Sure on HN we all know that security is more than (anti) viruses.
Case-in-point: iOS. Quite secure, doesn't require anti-virus software to be as secure as it is.